Dell PowerConnect W-IAP3WN User manual

Dell PowerConnect W-Series
Instant Access Point
6.2.0.0-3.2.0.0
User Guide

January 2013 |0511129-03 Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 |User Guide
Copyright
© 2013 Aruba Networks, Inc. Aruba Networks trademarks include , Aruba
Networks®, Aruba Wireless Networks®, the registered Aruba the Mobile Edge Company logo,
and Aruba Mobility Management System®. Dell™, the DELL™ logo, and PowerConnect™ are
trademarks of Dell Inc.
All rights reserved. Specifications in this manual are subject to change without notice.
Originated in the USA. All other trademarks are the property of their respective owners.
Open Source Code
Certain Aruba products include Open Source software code developed by third parties, including
software code subject to the GNU General Public License (GPL), GNU Lesser General Public
License (LGPL), or other Open Source Licenses. The Open Source code used can be found at this
site:
http://www.arubanetworks.com/open_source
Legal Notice
The use of Aruba Networks, Inc. switching platforms and software, by all individuals or
corporations, to terminate other vendors’ VPN client devices constitutes complete acceptance of
liability by that individual or corporation for this action and indemnifies, in full, Aruba Networks,
Inc. from any and all legal actions that might be taken against it with respect to infringement of
copyright on behalf of those vendors.

3|Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 |User Guide
Contents
Contents 3
About This Guide 15
Dell PowerConnect W-Instant Access Point Overview 15
Supported Devices 15
Objective 15
Intended Audience 16
Conventions 16
Contacting Support 16
Initial Configuration 17
Initial Setup 17
Pre-Installation Checklist 17
Connecting aW-IAP 18
Assigning an IP Address to the W-IAP 18
Connecting to a Provisioning Wi-Fi Network 18
Disabling the Provisioning Wi-Fi Network 20
Assigning a Static IP 20
Log in to the Dell W-Series Instant UI 21
Specifying a Country Code 21
W-IAP Cluster 22
DellW-Instant User Interface 23
Understanding the Dell W-Series Instant UI Layout 23
Banner 24
Search 24
Tabs 24
Networks Tab 24
Access Points Tab 25
Clients Tab 25
Links 26
New Version Available 27

Settings 27
RF 29
PEF 30
WIP 30
VPN 31
Wired 31
Maintenance 32
Support 32
Help 32
Logout 33
Monitoring 33
Info 33
RF Dashboard 34
Usage Trends 35
Spectrum 36
Overview (Device list) 36
Channel Utilization and Monitoring 36
Channel Details 37
Alerts 37
Client Alerts 37
Fault History 38
Active Faults 38
IDS 39
Configuration 39
AirGroup 40
Language 40
Dell PowerConnect W-AirWave Setup 40
Pause/Resume 41
Views 41
Wireless Network 43
Network Types 43
Employee Network 44
Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 |User Guide 4|Contents

5|Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 |User Guide
Adding an Employee Network 44
Voice Network 53
Adding a Voice Network 53
Guest Network 60
Adding a Guest Network 60
Editing a Network 68
Deleting a Network 68
Number of WLAN SSIDs Supported 68
Enabling the Extended SSID Option 69
VLAN Pooling 69
Managing W-IAPs 71
Preferred Band 71
Auto Join Mode 71
Disabling Auto Join Mode 71
Terminal Access 72
LED Display 72
TFTP Dump Server 72
Extended SSID 73
Deny Inter User Bridging and Deny Local Routing 73
Syslog Server 73
Syslog Facility Levels 74
Adding aW-IAP to the Network 74
Removing aW-IAP from the Network 75
Editing W-IAP Settings 75
Changing W-IAP Name 75
Changing IP Address of the W-IAP 76
Configuring Adaptive Radio Management 78
Configuring Uplink Management VLAN 79
Configuring Wired Bridging on Ethernet 0 79
Migrating to a Dell PowerConnect W-Series Mobility Controller Managed Network 80
Converting aW-IAP to RAP Mode 80
Converting aW-IAP to CAP 83

Converting aW-IAP to Standalone Mode 83
Converting Back to aW-IAP 84
Rebooting the W-IAP 84
Firmware Image Server in Cloud Network 86
Upgrade Using Dell PowerConnect W-AirWave and Image Server 86
Image Management Using Cloud Server 86
Image Management Using Dell PowerConnect W-AirWave 86
Automatic Firmware Image Check and Upgrade 87
Upgrading to New Version 88
Manual 88
Automatic 90
Layer-3 Mobility 91
Overview 91
Configuring a Mobility Domain 92
Home Agent Load Balancing 95
Spectrum Monitor 97
Creating Spectrum Monitors and Hybrid APs 97
Converting W-IAPs into Hybrid W-IAPs 97
Converting aW-IAPto a Spectrum Monitor 98
Spectrum Data 100
Overview - Device List 100
Non Wi-Fi Interferers 101
Channel Metrics 103
Channel Details 104
Spectrum Alerts 105
Time Management 107
NTP Server 107
Configuring an NTP Server 107
Daylight Saving Time 108
Enabling Daylight Saving Time 108
Virtual Controller 109
Master Election Protocol 109
Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 |User Guide 6|Contents

7|Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 |User Guide
Preference to an IAP with 3G/4G Card 109
Preference to aW-IAP with Non-Default IP 109
Virtual Controller IP Address 110
Specifying Name and IP Address for the Virtual Controller 110
Configuring the DHCP Server 110
Authentication 111
Authentication Methods in DellW-Instant 111
802.1X Authentication 111
Internal RADIUS Server 112
External RADIUS Server 112
Authentication Terminated on W-IAP 112
Configuring an External RADIUS Server 113
Enabling RADIUS Server Support 115
Authentication Survivability 115
RADIUS Server Authentication with VSA 118
List of Supported VSA 118
Management Authentication Settings 120
Captive Portal 121
Internal Captive Portal 121
Configuring Internal Captive Portal Authentication when Adding a Guest Network 122
Configuring Internal Captive Portal Authentication when Editing a Guest Network 123
Configuring Internal Captive Portal with External RADIUS Server Authentication when Adding a Guest
Network 124
Customizing a Splash Page 125
Disabling Captive Portal Authentication 126
External Captive Portal 127
Configuring External Captive Portal Authentication when Adding a Guest Network 127
Configuring External Captive Portal Authentication when Editing a Guest Network 129
External Captive Portal Authentication using ClearPass Guest 131
Creating a Web Login page in the ClearPass Guest 131
Configuring the RADIUS Server in Instant 131
WISPr Authentication 132
Configuring WISPr Authentication 132

MAC Authentication 133
Configuring MAC Authentication 134
Walled Garden Access 134
Creating a Walled Garden Access 134
MAC + 802.1X Authentication 136
Configuring MAC + 802.1X Authentication 136
MAC + Captive Portal Authentication 137
Configuring MAC + Captive Portal Authentication 137
Wired Authentication on aW-IAP 138
Certificates 138
Loading Certificates using Dell W-Series Instant UI 139
Loading Certificates using Dell PowerConnect W-AirWave 140
Encryption 143
Encryption Types Supported in DellW-Instant 143
WEP 143
TKIP 143
AES 143
Encryption Recommendations 143
Understanding WPA and WPA2 144
Recommended Authentication and Encryption Combinations 144
Role Derivation 145
User Roles 145
Creating a New User Role 145
Creating Role Assignment Rules 147
MAC-Address Attribute 147
DHCP Option and DHCP Fingerprinting 148
802.1X-Authentication-Type 148
User VLAN Derivation 149
User VLAN Derivation 149
Vendor Specific Attributes (VSA) 149
VLAN Derivation Rule 150
Configuring VLAN Derivation Rules on aW-IAP 150
Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 |User Guide 8|Contents

9|Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 |User Guide
User Role 151
Configuring a User Role 151
SSID Profile 152
Configuring VLAN Derivation Rules Using an SSID Profile 153
Instant Firewall 155
Service Options 156
Destination Options 158
Examples for Access Rules 158
Allow TCP Service to a Particular Network 158
Allow POP3 Service to a Particular Server 159
Deny FTP Service except to a Particular Server 160
Deny bootp Service except to a Particular Network 161
Content Filtering 163
Enabling Content Filtering 163
Enterprise Domains 164
OS Fingerprinting 167
Adaptive Radio Management 169
ARM Features 169
Channel or Power Assignment 169
Voice Aware Scanning 169
Load Aware Scanning 169
Band Steering Mode 169
Airtime Fairness Mode 170
Airtime Fairness Modes 170
Access Point Control 171
Customize Valid Channels 171
Min Transmit Power 171
Max Transmit Power 171
Client Aware 171
Scanning 171
Wide Channel Bands 171
Monitoring the Network with ARM 172

ARM Metrics 172
Configuring Administrator Assigned Radio Settings for W-IAP 172
Configuring Radio Profiles in Instant 173
Intrusion Detection System 177
Rogue AP Detection and Classification 177
Wireless Intrusion Protection (WIP) 177
Containment Methods 181
SNMP 183
SNMP Parameters for W-IAP 183
SNMP Traps 185
Ethernet Downlink 187
Ethernet Downlink Overview 187
Ethernet Downlink Profile Parameters 187
Assigning a Profile to the Ethernet Port 190
Hierarchical Deployment 193
Deployment 193
Uplink Configuration 195
Uplink Interface Configuration 195
Ethernet Uplink 195
3G/4G Uplink 196
Types of Modems 196
Provisioning 3G/4G Uplink Manually 198
Provisioning 3G Uplink Automatically 199
Provisioning a 3G/4G Switch Network 199
Wi-Fi Uplink 200
Provisioning Wi-Fi Uplink 200
Provisioning 3G/4G and Wi-Fi Uplink with Factory Setting 200
Uplink Management 201
Enforce Uplink 201
Uplink Preemption 201
Uplink Switchover 201
Uplink Switching Based on VPN Status 201
Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 |User Guide 10 |Contents